$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json) Hash identifier: bmMP/Xrz/EQ8rchm9Uzjl0tabSUriZ0Pjyktt/bDMe0= Subject key identifier: 64:88:13:9D:8C:13:F9:03:8D:D0:01:AD:D2:01:7A:D2:82:D7:E2:9D Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 01983684429D43B60DA4D7EE87319941AFAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft Manifest number: 14CD Signing time: Wed 23 Jul 2025 09:01:33 +0000 Manifest this update: Wed 23 Jul 2025 09:01:33 +0000 Manifest next update: Thu 24 Jul 2025 09:01:33 +0000 Files and hashes: 1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=) 2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=) 3: Dc_MqXVzSSK77uzNogE5HgnhLwg.roa (hash: O7xD6oauj5YnrNkfW6IbaFJNVQOfp627wKoUhUJUb+c=) 4: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=) 5: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=) 6: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=) 7: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=) 8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: voB6023axtjJHmtrv2uHLeoBGQcTBCmkZtassIgK9dI=) 9: xJMh3j3GpShYCJoYtsAE4dqx3WU.roa (hash: k38ffw08ruTV3gYvZegSeTLOSKho9qw6Tw7LEO7WSjk=) 10: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:84:42:9d:43:b6:0d:a4:d7:ee:87:31:99:41:af:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Jul 23 09:01:33 2025 GMT Not After : Jul 24 09:01:33 2025 GMT Subject: CN=6488139d8c13f9038dd001add2017ad282d7e29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:b1:ba:7c:fa:e5:df:6c:0b:ea:7c:a4:97: eb:e3:55:58:66:33:78:c8:1e:bc:31:a6:87:5c:2d: 6a:3d:04:30:45:75:93:d5:f9:18:16:97:87:fa:e7: 69:17:08:6e:28:57:34:a2:dc:42:a2:ba:18:8e:85: 70:2e:20:c7:64:d5:5e:d3:7d:d4:29:49:44:55:8b: 9d:27:20:d6:52:9a:ca:31:00:ba:3f:47:7d:a8:26: 0e:15:e4:fd:95:88:dc:d9:bb:d4:85:fe:55:55:2a: 05:d2:e1:6f:a9:60:3e:15:42:9e:8f:ab:aa:c0:85: 41:1e:91:4e:87:e5:4d:62:03:da:be:61:3b:1d:b7: 26:0f:7a:d2:7d:ac:2b:1d:b7:55:14:81:80:cb:9b: 9d:d2:bb:93:84:1e:52:af:ff:6f:71:db:cc:60:6c: e3:78:85:ed:7b:4f:42:b0:9b:7f:6f:1d:56:1f:01: 80:d2:49:f3:fb:ed:c8:23:40:0e:f6:4c:cb:da:87: 08:03:2f:70:7c:cc:cb:26:e6:ad:6a:3f:90:e5:de: 91:2d:b9:93:17:5c:b3:54:af:c6:47:58:94:f0:02: 6f:6c:45:af:e3:7a:64:0d:f5:15:95:ec:3a:78:a9: 03:b9:91:34:b6:d3:82:4e:16:c4:9c:76:7c:81:5e: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:88:13:9D:8C:13:F9:03:8D:D0:01:AD:D2:01:7A:D2:82:D7:E2:9D X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4a:02:71:cd:71:4b:b2:73:39:3d:7e:65:cd:dc:f4:aa:7a: 39:a5:1c:a8:dc:a8:fc:c9:0b:6a:74:9e:47:e7:18:a3:eb:a5: e3:c7:a2:83:a9:7e:65:f9:e8:29:37:10:e7:1d:e7:e6:76:f4: d9:a6:c3:22:b4:33:46:b7:6c:7c:85:60:07:4b:ea:c6:d7:52: 98:e8:03:16:49:a0:e9:43:4a:b6:41:d1:36:73:3b:7d:b4:24: 9f:94:4d:70:da:2b:53:79:50:ee:b2:39:fb:f0:4d:dd:8b:fb: d5:80:0f:2b:60:ff:ae:69:68:0e:bd:73:51:f7:be:67:26:92: fa:ca:68:5c:46:e3:eb:66:7f:2f:aa:cc:85:bb:13:1c:8b:f0: e8:64:10:c8:49:82:12:a4:da:61:f7:d8:af:e4:04:68:9d:18: e0:7f:f2:8c:f1:4f:db:52:21:65:7b:ff:ee:b2:52:d1:40:db: 5f:1c:38:1f:2e:31:ed:b3:0f:63:1e:86:15:f8:6f:4b:6f:01: 61:75:d1:3e:78:bf:9b:35:d8:70:53:a0:18:7a:e7:e3:26:47: e9:4a:4a:52:66:21:ce:87:53:35:2f:70:1b:c7:1f:81:28:2d: cc:7b:c0:39:21:66:57:fc:7e:98:f2:da:f4:ef:43:60:27:e0: 93:83:cf:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2hEKdQ7YNpNfuhzGZQa+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjUwNzIzMDkwMTMzWhcNMjUwNzI0MDkwMTMzWjAzMTEwLwYDVQQD Eyg2NDg4MTM5ZDhjMTNmOTAzOGRkMDAxYWRkMjAxN2FkMjgyZDdlMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Gxunz65d9sC+p8pJfr41VYZjN4 yB68MaaHXC1qPQQwRXWT1fkYFpeH+udpFwhuKFc0otxCoroYjoVwLiDHZNVe033U KUlEVYudJyDWUprKMQC6P0d9qCYOFeT9lYjc2bvUhf5VVSoF0uFvqWA+FUKej6uq wIVBHpFOh+VNYgPavmE7HbcmD3rSfawrHbdVFIGAy5ud0ruThB5Sr/9vcdvMYGzj eIXte09CsJt/bx1WHwGA0knz++3II0AO9kzL2ocIAy9wfMzLJuataj+Q5d6RLbmT F1yzVK/GR1iU8AJvbEWv43pkDfUVlew6eKkDuZE0ttOCThbEnHZ8gV5ERQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSIE52ME/kDjdABrdIBetKC1+KdMB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0oCcc1x S7JzOT1+Zc3c9Kp6OaUcqNyo/MkLanSeR+cYo+ul48eig6l+ZfnoKTcQ5x3n5nb0 2abDIrQzRrdsfIVgB0vqxtdSmOgDFkmg6UNKtkHRNnM7fbQkn5RNcNorU3lQ7rI5 +/BN3Yv71YAPK2D/rmloDr1zUfe+ZyaS+spoXEbj62Z/L6rMhbsTHIvw6GQQyEmC EqTaYffYr+QEaJ0Y4H/yjPFP21IhZXv/7rJS0UDbXxw4Hy4x7bMPYx6GFfhvS28B YXXRPni/mzXYcFOgGHrn4yZH6UpKUmYhzodTNS9wG8cfgSgtzHvAOSFmV/x+mPLa 9O9DYCfgk4PP4w== -----END CERTIFICATE-----Generated at Wed Jul 23 12:24:06 2025 by rpki-client